|
cve-2026-96628
|
|
Arcane: Environment access token bypasses the admin-re…
|
getarcaneapp
|
arcane
|
2026-10-16T21:10:29.214Z |
2026-10-19T16:40:50.253Z |
|
cve-2026-112078
|
|
RVC-Project Retrieval-based-Voice-Conversion-WebUI web…
|
RVC-Project
|
Retrieval-based-Voice-Conversion-WebUI
|
2026-10-19T04:30:19.922Z |
2026-10-19T16:40:29.435Z |
|
cve-2026-111880
|
8.3 (v4.0)
7.4 (v3.1)
|
FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write v…
|
FreeRDP
|
FreeRDP
|
2026-10-17T18:46:08.393Z |
2026-10-19T16:40:26.597Z |
|
cve-2026-112366
|
8.7 (v4.0)
7.5 (v3.1)
|
Picomatch through 4.0.7 ReDoS via single-branch repeat…
|
micromatch
|
picomatch
|
2026-10-19T15:29:00.491Z |
2026-10-19T16:40:19.321Z |
|
cve-2026-111891
|
7 (v4.0)
5.5 (v3.1)
|
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta Privileg…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:15.227Z |
2026-10-19T16:40:19.217Z |
|
cve-2026-111896
|
5.1 (v4.0)
5.4 (v3.1)
|
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Stored XSS via …
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:19.253Z |
2026-10-19T16:40:09.249Z |
|
cve-2026-111902
|
6.9 (v4.0)
5.3 (v3.1)
|
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization B…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:22.764Z |
2026-10-19T16:39:57.712Z |
|
cve-2026-111907
|
7.1 (v4.0)
7.1 (v3.1)
|
phpMyFAQ 4.0.0 before 4.1.9 CSRF via /admin/api/update…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:26.117Z |
2026-10-19T16:39:51.053Z |
|
cve-2026-111912
|
7.1 (v4.0)
6.5 (v3.1)
|
Admidio 5.0.0 before 5.0.16 IDOR via Forum Topic Update
|
Admidio
|
admidio
|
2026-10-17T18:46:29.658Z |
2026-10-19T16:39:44.005Z |
|
cve-2026-111918
|
5.3 (v4.0)
5.4 (v3.1)
|
Vikunja 1.0.0-rc0 before 2.7.0 Cross-Tenant Task Posit…
|
go-vikunja
|
vikunja
|
2026-10-17T18:46:33.245Z |
2026-10-19T16:39:37.953Z |
|
cve-2026-111923
|
8.7 (v4.0)
7.5 (v3.1)
|
Fleet before 4.89.0 Unauthenticated DoS via Apple MDM …
|
fleetdm
|
fleet
|
2026-10-17T18:46:36.681Z |
2026-10-19T16:39:31.301Z |
|
cve-2026-111929
|
6 (v4.0)
5.3 (v3.1)
|
Coder 2.30.0 before 2.34.8 Cross-Organization File Dis…
|
coder
|
coder
|
2026-10-17T18:46:40.707Z |
2026-10-19T16:39:24.356Z |
|
cve-2026-111934
|
6.3 (v4.0)
3.7 (v3.1)
|
Coder before 2.34.7 IP Spoofing via X-Forwarded-For Header
|
coder
|
coder
|
2026-10-17T18:46:44.142Z |
2026-10-19T16:39:17.593Z |
|
cve-2026-111866
|
|
nemoTyrant manong func.php arr2sql sql injection
|
nemoTyrant
|
manong
|
2026-10-17T23:45:21.536Z |
2026-10-19T16:39:11.372Z |
|
cve-2026-111871
|
|
itsmeravitejak Online-Examination-System subjectsdb.ph…
|
itsmeravitejak
|
Online-Examination-System
|
2026-10-18T03:45:17.829Z |
2026-10-19T16:39:04.791Z |
|
cve-2026-111875
|
|
David-Crty Databasement Scheduled Restore SaveSchedule…
|
David-Crty
|
Databasement
|
2026-10-18T05:30:17.829Z |
2026-10-19T16:38:55.279Z |
|
cve-2026-112002
|
7.6 (v4.0)
6.8 (v3.1)
|
ProjectSend 2.5.0 before 2.7.0 Unverified Password Cha…
|
ProjectSend
|
ProjectSend
|
2026-10-18T11:38:27.111Z |
2026-10-19T16:38:48.998Z |
|
cve-2026-112007
|
6.9 (v4.0)
6.1 (v3.1)
|
Schism Tracker through 20260524 Heap Out-of-Bounds Wri…
|
schismtracker
|
Schism Tracker
|
2026-10-18T11:38:30.590Z |
2026-10-19T16:38:41.739Z |
|
cve-2026-112012
|
4.8 (v4.0)
5.3 (v3.1)
|
libtta through 2.3 Stack Out-of-Bounds Write via Zero …
|
True Audio
|
libtta
|
2026-10-18T11:38:34.029Z |
2026-10-19T16:38:35.225Z |
|
cve-2026-112017
|
7.1 (v4.0)
6.5 (v3.1)
|
JeecgBoot before 3.9.5 SQL Injection via SqlInjectionU…
|
jeecgboot
|
JeecgBoot
|
2026-10-18T11:38:37.829Z |
2026-10-19T16:38:28.327Z |
|
cve-2026-111984
|
|
AUTOMATIC1111 stable-diffusion-webui Card Builder ui_e…
|
AUTOMATIC1111
|
stable-diffusion-webui
|
2026-10-18T11:45:16.475Z |
2026-10-19T16:38:21.574Z |
|
cve-2026-112046
|
6.8 (v4.0)
5.5 (v3.1)
|
OW2 ASM 9.11 before 9.11.1 Denial of Service via Infin…
|
OW2
|
ASM
|
2026-10-18T12:19:35.358Z |
2026-10-19T16:38:14.812Z |
|
cve-2026-112051
|
8.3 (v4.0)
6.5 (v3.1)
|
Xinference through 4.0.1 Path Traversal via model_name…
|
xorbitsai
|
inference
|
2026-10-18T12:19:43.049Z |
2026-10-19T16:38:08.267Z |
|
cve-2026-112056
|
6.8 (v4.0)
5.5 (v3.1)
|
wvWare wv through 1.2.9 Heap Out-of-Bounds Read via wv…
|
wvWare
|
wv
|
2026-10-18T12:19:47.212Z |
2026-10-19T16:37:58.644Z |
|
cve-2026-112153
|
|
vraj404 Criminal-Management-System Officer Registratio…
|
vraj404
|
Criminal-Management-System
|
2026-10-19T15:30:16.983Z |
2026-10-19T16:37:50.313Z |
|
cve-2026-111988
|
|
dyad-sh dyad OAuth Callback cross-site request forgery
|
dyad-sh
|
dyad
|
2026-10-18T14:30:22.617Z |
2026-10-19T16:37:41.939Z |
|
cve-2026-112074
|
|
Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb…
|
Tencent
|
ncnn
|
2026-10-19T03:30:21.932Z |
2026-10-19T16:37:33.056Z |
|
cve-2026-111993
|
|
Soarkey StudentManagement AdminDao.java UserDao.login …
|
Soarkey
|
StudentManagement
|
2026-10-18T17:00:07.731Z |
2026-10-19T16:37:32.212Z |
|
cve-2026-112028
|
|
light0011 cms Vote VoteController.class.php logic error
|
light0011
|
cms
|
2026-10-18T22:45:20.618Z |
2026-10-19T16:37:24.891Z |
|
cve-2026-112032
|
|
aircheng-org iWebShop-5 util.php search sql injection
|
aircheng-org
|
iWebShop-5
|
2026-10-18T23:45:20.459Z |
2026-10-19T16:37:16.437Z |